aboutsummaryrefslogtreecommitdiffstats
path: root/roles/ssh/templates
diff options
context:
space:
mode:
authorStonewall Jackson <stonewall@sacredheartsc.com>2023-02-04 01:23:43 -0500
committerStonewall Jackson <stonewall@sacredheartsc.com>2023-02-04 01:52:13 -0500
commit0261e875679f1bf63c8d689da7fc7e014597885d (patch)
tree3f19cd74a0c1070944f75437f30b098d6ef2ffcb /roles/ssh/templates
downloadselfhosted-0261e875679f1bf63c8d689da7fc7e014597885d.tar.gz
selfhosted-0261e875679f1bf63c8d689da7fc7e014597885d.zip
initial commit
Diffstat (limited to 'roles/ssh/templates')
-rw-r--r--roles/ssh/templates/etc/ssh/ssh_config.j213
1 files changed, 13 insertions, 0 deletions
diff --git a/roles/ssh/templates/etc/ssh/ssh_config.j2 b/roles/ssh/templates/etc/ssh/ssh_config.j2
new file mode 100644
index 0000000..bbde76e
--- /dev/null
+++ b/roles/ssh/templates/etc/ssh/ssh_config.j2
@@ -0,0 +1,13 @@
+Include /etc/ssh/ssh_config.d/*.conf
+
+CanonicalizeHostname always
+CanonicalDomains {{ ssh_canonical_domains | join(' ') }}
+CanonicalizeMaxDots 0
+CanonicalizeFallbackLocal yes
+
+Host {{ ssh_canonical_domains | map('regex_replace', '^', '*.') | join(' ') }}
+ GSSAPIAuthentication yes
+ GSSAPIDelegateCredentials yes
+ GSSAPIKeyExchange yes
+ GSSAPIRenewalForcesRekey yes
+ GSSAPITrustDns yes